摘要 |
PROBLEM TO BE SOLVED: To efficiently perform a correlation analysis in a case in which high frequency events and low frequency events are mixed up in relation to an analysis technique for combining stream monitoring with storage search.SOLUTION: A procedure list generator 120 generates a conditional procedure list 131 in which a first starting procedure for starting storage search when stream monitoring is completed, and a second starting procedure for starting storage search when a specific event occurs in the stream monitoring before the completion of the stream monitoring are defined. A monitoring-search engine 140 starts storage search in accordance with either the first starting procedure or the second starting procedure, upon determining whether the specific event occurs before the completion of the stream monitoring in accordance with the conditional procedure list 131.SELECTED DRAWING: Figure 1 |